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What is claim^k Is: 
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1, A method jSor defeating a desnial-of-service attack, 
for use in a coiwauinication system in which a client sends a 
ciphertext of a random, nuiober chosen by the client encrypted 



■under a public key! 
method comprising 



> \ 



lof 'a server to authenticate a server, the 
ie steps of: 

(a) at the server, generating a random number rs in 
response to a service request from a client and sending the 

random number to tH.jp client:; 

1 1 i> 

(b) at the sejrver, receiving the ciph@rt@s:t produced by 

■ '.( 

using the random nuinber r B from the client and a random number 

1 1 j. 

r A of the client/ ■! 

(c) at th<3 sexb-eri recovering a random number jtb from the 
^ciphertext received from the client and comparing the 

recovered random iiimber with the random number sent to the 

■j; 

client; and ;! : 

i 

(d) if rhe ^random numbers match— at the step (c) , 
providing the service, 'and, otherwise, denying the service. 



2. The methods 
step (a) , the rd!: 



as ( received in claim 1, wherein, at the 
dbm number rfe obtained by an equation 
r B =^(K mast9r> index_r B ) [where J? is a hash function, K^ st or is a 
secret master key jand index^r B is an index parameter for the 



25 random number. 



? ; 

1 !' 



3. 



A meth h bd for defeating denial-of-service attack, 
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applicable to a seiyer authentication system in which a client 
upes a discrete exponentiation g r * as a random challenge the 
server a private j^key and a public key of a server are 

il 

respectively b and 1 ' g h , and the ciphertext of the client's 

challenge using ttik public key 'of the server is g hrA . the 

\ 

V 

method comprising like steps of; 

j! 

(a) at the Sjerver, sending a random number r A to a 
client; 

(b) at the server, receiving x and y values which the 
client computed by [jiising the random number from the server as: 

' 1' * 

\; . 

El j. 

where b is th|e private key of the server and g b is the 

.!! 

public key of the server r and 

f j 

I'll 

where h represents a hash function; 

(c) comparing 1 ^ tram, the client with, y' as follows: 

■f! ■ 1,-1 

i; y=h{x b g~ T *); and 

\' 

(d) if y and'l^' match, providing- a requested service to 
the client, and, otjjierwise, denying rne service the client. 

\i 

4« In a commuhicatioh systeia having a large capability 

i, 

processor in which Jja client sends a server a ciphertext of a 
random number encrypted under a p-ublic-Jrey -of the server to 
authenticate the jiperver, a computer readable medium for 
recording a program. 1 ! for implementing the functions of; 
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(a) at the server/ generating a random number r* in 

..s 

response to a service -request from a client and sending the 
random number to tH£ client; 

(b) at the' s&rver, receiving the ciphertext which is 
5 produced by the clHLeijt based on the random number r B sent to 

the client and a-rdipxiom number of the client; 

\\ 

(c) at the server, recovering the random number r B from 

the ciphertext reijeivted from the client and comparing the 

j r" 

recovered random nikmber with the random number sent to the 
10 client; and f ; 

(d) . if the jibandom numbers march at the step (c) , 
providing the service, and r otherwise, denying the service. 

, i' 

I!! 

5, In a servjer authentication system having a large 
15 capability processor, in which a client uses a disrecte 

M 

exponentiation g** *.■ as a random challenge to a server, a 
private key and ( a -corresponding public key of the server are 
respectively b and): g h , and a ciphertext of the client's 
challenge using tfyie public key of the server is g trjL , a 
20 .computer readable, jji medium for recording a program for 
implementing the functions of; 

(a) at the se^er, sending a random number to a client; 

(b) at the s<|irver, receiving x and y values which the 
client computed by jising the random number from, the server ass 

where b is t th|^ private key of the server and g* is the 

• 1 
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public fcey of the 4j*rv£r, and 



where h represents a hash function; 

E ! 



(c) at the seirver, comparing y from the client with y x as 
follows; !, 



ii >'=A(*»V»);'and 

(d) if ^ ana >f match, providing a service to the client, 



10 



li 

and, otherwise, defying the service. 
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